LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Scott Fendley <[log in to unmask]>
Thu, 1 Dec 2005 22:46:55 -0600
text/plain (93 lines)
Greetings all,  I have a question that I have not found an answer to 
yet.  So thought I would ask the ListServ mailing list.

Pretty well every mailing list on our campus listserv machine gets 
similar emails to the below on a regular basis.  The original email 
is considered phishing spam and should never be going to any of the 
mailing lists we host.  We had a query recently of the viability of 
dropping any email inbound to our server which is from one of about 
25 addresses commonly used in phishing attacks.  As these 25 
addresses have been served out already, we would really love to find 
a recommended way to either drop these emails in LSMTP or 
listserv...or otherwise not bother the individual list owners with 
these "problem" reports.

Do any of you have suggestions on how to best silence the junk caused 
by this fraudulent email?

Scott

>>Date: Thu, 01 Dec 2005 13:16:24 -0600
>>From: "University of Arkansas LISTSERV Server (14.4)"
>>  <[log in to unmask]>
>>Subject: Problem processing mail file from [log in to unmask]
>>To: <listowner addressses here>
>>X-PMX-Version: 5.1.0.207369, Antispam-Engine: 2.1.0.0,
>>  Antispam-Data: 2005.12.1.20
>>
>>An error occurred while  processing file 30916918 from [log in to unmask]:
>>"Mail has been received for delivery to the LISTNAME-L list from a 
>>user that had
>>been served out".
>>
>>Return-Path: <[log in to unmask]>
>>Received: from 209.190.20.114 (209.190.20.114:2795) by 
>>listserv.uark.edu (LSMTP for Windows NT v1.1b) with SMTP id 
>><[log in to unmask]>; Thu, 1 Dec 2005 13:16:24 -0600
>>Received: from 227.222.76.24 by ; Thu, 01 Dec 2005 17:09:20 -0200
>>Message-ID: <[log in to unmask]>
>>From: "FCU Security Department" <[log in to unmask] >
>>Reply-To: "FCU Security Service" <[log in to unmask] >
>>To: [log in to unmask]
>>Subject: Account Update
>>Date: Thu, 01 Dec 2005 13:07:20 -0600
>>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>>         boundary="--97321727034918840"
>>X-Priority: 1
>>X-MSMail-Priority: High
>>
>>Content-Type: text/html;
>>
>>Credit Union is constantly working to ensure security by regularly
>>screening the accounts in our system. We recently reviewed your account,
>>and we need more information to help us provide you with secure service.
>>Until we can collect this information, your access to sensitive account
>>features will be limited. We would like to restore your access as soon
>>as possible, and we apologize for the inconvenience.
>>
>>----------
>>
>>Why is my account access limited?
>>
>>Your account access has been limited for the following reason(s):
>>* We would like to ensure that your account was not accessed by an
>>unauthorized third party. Because protecting the security of your
>>account is our primary concern, we have limited access to sensitive
>>Credit Union account features. We understand that this may be an
>>inconvenience but please understand that this temporary limitation is
>>for your protection.
>>
>>(Your case ID for this reason is CU1-GX868-234-811381.)
>>
>>
>>At Credit Union, one of our most important responsibilities to you, our
>>customer, is the safekeeping of the nonpublic personal ("confidential")
>>information you have entrusted to us and using this information in a
>>responsible manner. Appropriate use of the confidential information you
>>provide us is also at the heart of our ability to provide you with
>>exceptional personal service whenever you contact us.
>>
>>----------
>>
>>How can I restore my account access?
>>
>>
>>Please confirm your identity here: Restore 
>><http://210.72.224.26/usage/webalizer.png/.CREDIT-UNION/update.php>M 
>>y Online Banking and complete the "Steps to Remove Limitations."
>>
>>Completing all of the checklist items will automatically restore your
>>account access.

ATOM RSS1 RSS2